PT-2006-5869 · Ph03Y3Nk · Ph03Y3Nk Just Another Flat File (Jaf) Cms

Nanoymaster · Publicado 2006-10-02 · Atualizado 2018-10-17 · CVE-2006-5131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ph03y3nk just another flat file (JAF) CMS version 4.0 RC1

Description The issue allows remote attackers to execute arbitrary code within sections bounded by "", possibly due to a static code injection vulnerability involving admin/data inc.php.

Recommendations For ph03y3nk just another flat file (JAF) CMS version 4.0 RC1, consider restricting access to the module/shout/jafshout.php file and the admin/data inc.php script until a patch is available. As a temporary workaround, restrict the execution of code within sections bounded by "". At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5131

Produtos afetados

Ph03Y3Nk Just Another Flat File (Jaf) Cms

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-5131 · Nota de Segurança
• http://securityreason.com/securityalert/1674 · Nota
• http://secunia.com/advisories/22143 · Aviso do Fabricante
• http://securityfocus.com/archive/1/447081/100/0/threaded · Nota